Vulnerability in X-Doom

CVE-2006-1592

Buffer overflow in the is_client_wad_ok function in w_wad.cpp for (1) Zdaemon 1.08.01 and (2) X-Doom allows remote attackers to execute arbitrary code via a long filename argument.

EPSS: 0.053 (91.7th percentile) — read the EPSS interpretation.

Affected products

  • X-doom — versions 1.06.07
  • Zdaemon — versions 1.08.01
  • N/a — versions n/a

References